Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

Ranked by EVRS

910 match · filtered from 2,960

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 1 to 25
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
1 CVE-2014-0160OpenSSL — OpenSSL Information Disclosure VulnerabilityKEV since 2022 · listed over a year 84 7.5 100.0% · 99.99th 2022-05-04 2022-05-25KEV since 2022 · listed over a year
2 CVE-2023-32315Ignite Realtime — Ignite Realtime Openfire Path Traversal VulnerabilityKEV since 2023 · listed over a year 84 7.5 100.0% · 99.99th 2023-08-24 2023-09-14KEV since 2023 · listed over a year
3 CVE-2023-44487IETF — HTTP/2 Rapid Reset Attack VulnerabilityKEV since 2023 · listed over a year 84 7.5 100.0% · 99.99th 2023-10-10 2023-10-31KEV since 2023 · listed over a year
4 CVE-2020-3452Cisco — Cisco ASA and FTD Read-Only Path Traversal VulnerabilityKEV since 2021 · listed over a year 84 7.5 100.0% · 99.99th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
5 CVE-2021-22204Perl — ExifTool Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 84 7.8 100.0% · 99.98th 2021-11-17 2021-12-01KEV since 2021 · listed over a year
6 CVE-2021-3156Sudo — Sudo Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year 84 7.8 100.0% · 99.98th 2022-04-06 2022-04-27KEV since 2022 · listed over a year
7 CVE-2021-39226Grafana Labs — Grafana Authentication Bypass VulnerabilityKEV since 2022 · listed over a year 84 7.3 99.9% · 99.97th 2022-08-25 2022-09-15KEV since 2022 · listed over a year
8 CVE-2018-0296Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityKEV since 2021 · listed over a year 84 7.5 99.9% · 99.97th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
9 CVE-2023-21839Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2023 · listed over a year 84 7.5 99.9% · 99.97th 2023-05-01 2023-05-22KEV since 2023 · listed over a year
10 CVE-2019-1653Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEV since 2021 · listed over a year 84 7.5 99.9% · 99.96th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
11 CVE-2023-29298Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year 84 7.5 99.8% · 99.96th 2023-07-20 2023-08-10KEV since 2023 · listed over a year
12 CVE-2023-38205Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year 84 7.5 99.8% · 99.95th 2023-07-20 2023-08-10KEV since 2023 · listed over a year
13 CVE-2024-28995SolarWinds — SolarWinds Serv-U Path Traversal VulnerabilityKEV since 2024 · listed over a year 84 7.5 99.6% · 99.95th 2024-07-17 2024-08-07KEV since 2024 · listed over a year
14 CVE-2019-17558Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 84 7.5 98.6% · 99.92nd 2021-11-03 2022-05-03KEV since 2021 · listed over a year
15 CVE-2024-20767Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2024 · listed over a year 84 7.4 98.5% · 99.92nd 2024-12-16 2025-01-06KEV since 2024 · listed over a year
16 CVE-2021-21311Adminer — Adminer Server-Side Request Forgery VulnerabilityKEV since 2025 · listed over a year 84 7.2 98.5% · 99.92nd 2025-09-29 2025-10-20KEV since 2025 · listed over a year
17 CVE-2024-12987DrayTek — DrayTek Vigor Routers OS Command Injection VulnerabilityKEV since 2025 · listed over a year 84 6.9 98.2% · 99.91st 2025-05-15 2025-06-05KEV since 2025 · listed over a year
18 CVE-2022-43769Hitachi Vantara — Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityKEV since 2025 · listed over a year 84 7.2 97.7% · 99.91st 2025-03-03 2025-03-24KEV since 2025 · listed over a year
19 CVE-2020-25078D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityKEV since 2025 · listed over a year 84 7.5 97.5% · 99.9th 2025-08-05 2025-08-26KEV since 2025 · listed over a year
20 CVE-2021-41277Metabase — Metabase GeoJSON API Local File Inclusion VulnerabilityKEV since 2024 · listed over a year 84 7.5 97.2% · 99.9th 2024-11-12 2024-12-03KEV since 2024 · listed over a year
21 CVE-2017-17562Embedthis — Embedthis GoAhead Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 84 8.1 97.1% · 99.89th 2021-12-10 2022-06-10KEV since 2021 · listed over a year
22 CVE-2017-8291Artifex — Artifex Ghostscript Type Confusion VulnerabilityKEV since 2022 · listed over a year 84 7.8 97.0% · 99.89th 2022-05-24 2022-06-14KEV since 2022 · listed over a year
23 CVE-2019-20500D-Link — D-Link DWL-2600AP Access Point Command Injection VulnerabilityKEV since 2023 · listed over a year 84 7.8 96.7% · 99.89th 2023-06-29 2023-07-20KEV since 2023 · listed over a year
24 CVE-2017-12637SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2025 · listed over a year 84 7.5 95.1% · 99.87th 2025-03-19 2025-04-09KEV since 2025 · listed over a year
25 CVE-2022-33891Apache — Apache Spark Command Injection VulnerabilityKEV since 2023 · listed over a year 84 8.8 93.2% · 99.84th 2023-03-07 2023-03-28KEV since 2023 · listed over a year
Showing 1–25 of 910

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics